Small files or scripts placed on a visitor’s device to remember activity or preferences; where they involve personal data, GDPR consent rules apply alongside the ePrivacy Directive (Articles 4(11), 7).